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The CAST-128 Encryption Algorithm 
Status of this Memo 
This memo provides information for the Internet community. This memo 
does not specify an Internet standard of any kind. Distribution of 
this memo is unlimited. 
Abstract 
There is a need in the Internet community for an unencumbered 


encryption algorithm with a range of key sizes that can provide 
security for a variety of cryptographic applications and protocols. 


This document describes an existing algorithm that can be used to 
satisfy this requirement. Included are a description of the cipher 
and the key scheduling algorithm (Section 2), the s-boxes (Appendix 
A), and a set of test vectors (Appendix B). 
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1. Introduction 


This document describes the CAST-128 encryption algorithm, а DES-like 
Substitution-Permutation Network (SPN) cryptosystem which appears to 
have good resistance to differential cryptanalysis, linear 
cryptanalysis, and related-key cryptanalysis. This cipher also 
possesses a number of other desirable cryptographic properties, 
including avalanche, Strict Avalanche Criterion (SAC), Bit 
Independence Criterion (BIC), no complementation property, and an 
absence of weak and semi-weak keys. It thus appears to be a good 
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candidate for general-purpose use throughout the Internet community 
wherever a cryptographically-strong, freely-available encryption 
algorithm is required. 


Adams [Adams] discusses the CAST design procedure in some detail; 
analyses can also be obtained on-line (see, for example, [Webl] or 
[Web2]). 


2. Description of Algorithm 


CAST-128 belongs to the class of encryption algorithms known as 
Feistel ciphers; overall operation is thus similar to the Data 
Encryption Standard (DES). The full encryption algorithm is given in 
the following four steps. 


INPUT: plaintext ml...m64; key К = k1...k128. 
OUTPUT: ciphertext cl...c64. 


1. (key schedule) Compute 16 pairs of subkeys {Kmi, Kri} from K 
(see Sections 2.1 and 2.4). 


2. (LO,RO) <-- (ml...m64). (Split the plaintext into left and 
right 32-bit halves 10 = п1...т32 and RO = m33...m64.) 
3. (16 rounds) for i from 1 to 16, compute Li and Ri as follows: 
Li = Ri-1; 
Ri = Li-1 ^ f(Ri-1,Kmi,Kri), where f is defined in Section 2.2 
(f is of Type 1, Type 2, or Type 3, depending on i). 
4. с1...с64 <-- (В16,116). (Exchange final blocks L16, R16 and 


concatenate to form the ciphertext.) 
Decryption is identical to the encryption algorithm given above, 
except that the rounds (and therefore the subkey pairs) are used in 


reverse order to compute (LO,RO) from (R16,L16). 


See Appendix B for test vectors which can be used to verify 
correctness of an implementation of this algorithm. 


2.1. Pairs of Round Keys 
CAST-128 uses a pair of subkeys per round: а 32-bit quantity Km is 


used as a "masking" key and a 5-bit quantity Kr is used as a 
"rotation" key. 
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2.2. Non-Identical Rounds 


Three different round functions are used in CAST-128. The rounds are 
as follows (where "D" is the data input to the f function and "Ia" - 
"Id" are the most significant byte through least significant byte of 
I, respectively). Note that "+" and "-" are addition and subtraction 
modulo 2**32, "^" is bitwise XOR, and "«««" is the circular left- 
shift operation. 


Type 1: I = ((Kmi + D) <<< Kri) 

f = ((51[1а] ^ S2[Ib]) - S3[Ic]) + S4[Id] 
Type 2: I = ((Kmi ^ D) <<< Kri) 

f = ((51[1а4] - S2[Ib]) + S3[Ic]) ^ S4[Id] 
Type 3: І = ((Kmi - D) <<< Kri) 

f = ((51[1а] + S2[Ib]) ^ S3[Ic]) - S4[Id] 


Rounds 1, 4, 7, 10, 13, and 16 use f function Type 1. 
Rounds 2, 5, 8, 11, and 14 use f function Type 2. 
Rounds 3, 6, 9, 12, and 15 use f function Type 3. 


2.3. Substitution Boxes 


CAST-128 uses eight substitution boxes:  s-boxes S1, S2, S3, and S4 
are round function s-boxes; S5, S6, S7, and S8 are key schedule s- 
boxes. Although 8 s-boxes require a total of 8 KBytes of storage, 
note that only 4 KBytes are required during actual encryption / 
decryption since subkey generation is typically done prior to any 
data input. 


See Appendix A for the contents of s-boxes S1 - S8. 

2.4. Key Schedule 
Let the 128-bit key be xO0x1x2x3x4x5x6x7x8x9xAxBxCxDxExF, where x0 
represents the most significant byte and xF represents the least 


significant byte. 


Let z0..zF be intermediate (temporary) bytes. 
Let Si[] represent s-box i and let "^" represent XOR addition. 
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The subkeys are formed from the key x0x1x2x3x4x5x6x7x8x9xAxBxCxDXEXF 
as follows. 


20212223 = х0х1х2х3 ^ S5[xD] ^ S6[xF] ^ S7[xC] ^ S8[xE] ^ S7[x8] 
24252627 = x8x9xAxB ^ 55[20] ^ S6[z2] ^ 57[21] ^ S8[z3] ^ S8[xA] 
Z8z9zAzB = xCxDxExF ^ 55[27] ^ S6[z6] ^ S7[z5] ^ S8[z4] ^ S5[x9] 
zCzDzEzF = x4x5x6x7 ^ S5[zA] ^ S6[z9] ^ S7[zB] ^ S8[z8] ^ S6[xB] 
КІ = S5[z8] ^ 56[29] ^ S7[z7] ^ S8[z6] ^ 55[22] 


K2 = S5[zA] ^ S6[zB] ^ S7[z5] ^ S8[z4] ^ 56[26] 
КЗ = S5[zC] ^ S6[zD] ^ S7[z3] ^ 58[22] ^ 571291 
K4 = S5[zE] ^ S6[zF] ^ S7[z1] ^ S8[z0] ^ S8[zC] 


х0хіх2х3 = z8z9zAzB ^ 55[25] ^ S6[z7] ^ S7[z4] ^ S8[z6] ^ 57[20] 


x4x5x6x7 = 20212223 ^ S5[x0] ^ S6[x2] ^ S7[x1] ^ S8[x3] ^ S8[z2] 
x8x9xAxB = 24252627 ^ 55[х7] ^ S6[x6] ^ S7[x5] ^ S8[x4] ^ 551211 
хСхрхЕхЕ = zCzDzEzF ^ S5[xA] ^ 56[х9] ^ S7[xB] ^ S8[x8] ^ S6[z3] 
K5 = S5[x3] ^ S6[x2] ^ S7[xC] ^ S8[xD] ^ S5[x8] 
K6 = S5[x1] ^ 56[х0] ^ S7[xE] ^ S8[xF] ^ S6[xD] 
K7 = S5[x7] ^ S6[x6] ^ S7[x8] ^ S8[x9] ^ S7[x3] 
K8 = S5[x5] ^ 56[х4] ^ S7[xA] ^ S8[xB] ^ S8[x7] 


20212223 = х0х1х2х3 ^ S5[xD] ^ S6[xF] ^ S7[xC] ^ S8[xE] ^ S7[x8] 
24252627 = x8x9xAxB ^ 55[20] ^ S6[z2] ^ S7[z1] ^ S8[z3] ^ S8[xA] 
Z8z9zAzB = xCxDxExF ^ S5[z7] ^ S6[z6] ^ S7[z5] ^ S8[z4] ^ S5[x9] 
zCzDzEzF = x4x5x6x7 ^ S5[zA] ^ S6[z9] ^ S7[zB] ^ S8[z8] ^ S6[xB] 
K9 = S5[z3] ^ 56[22] ^ S7[zC] ^ S8[zD] ^ 55129) 
К10 = S5[z1] ^ S6[z0] ^ S7[zE] ^ S8[zF] ^ S6[zC] 
К11 = S5[z7] ^ S6[z6] ^ S7[z8] ^ S8[z9] ^ 57[22] 
К12 = S5[z5] ^ S6[z4] ^ S7[zA] ^ S8[zB] ^ S8[z6] 
х0х1х2х3 = z8z9zAzB ^ 55[25] ^ S6[z7] ^ S7[z4] ^ S8[z6] ^ 57[20] 
x4x5x6x7 = 20712223 ^ S5[x0] ^ 56[х2] ^ S7[x1] ^ S8[x3] ^ S8[z2] 
x8x9xAxB = 24252627 ^ 55[х7] ^ S6[x6] ^ S7[x5] ^ S8[x4] ^ 551211 
XCXDXxExF zCzDzEzF ^ S5[xA] ^ 56[х9] ^ S7[xB] ^ S8[x8] ^ S6[z3] 
K13 - S5[x8] ^ S6[x9] ^ S7[x7] ^ S8[x6] ^ S5[x3] 
К14 = S5[xA] ^ S6[xB] ^ S7[x5] ^ S8[x4] ^ S6[x7] 
K15 S5[xC] ^ S6[xD] ^ S7[x3] ^ S8[x2] ^ S7[x8] 
K16 S5[xE] ^ S6[xF] ^ 57[х1] S8[x0] ^ S8[xD] 


> 
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[The remaining half is identical to what is given above, 
x0..xF to generate keys K17 - K32. 


from the last created 


May 1997 


carrying on 


20212223 = х0х1х2х3 ^ S5[xD] ^ S6[xF] ^ S7[xC] ^ S8[xE] S7[x8] 
24252627 = x8x9xAxB ^ 55[20] ^ S6[z2] ^ S7[z1] ^ S8[z3] S8[xA] 
Z8z9zAzB = xCxDxExF ^ 55[27] ^ 56[26] ^ S7[z5] ^ S8[z4] S5[x9] 
zCzDzEzF = x4x5x6x7 ^ S5[zA] ^ 56[29] ^ S7[zB] ^ 581781 S6[xB] 
K17 = S5[z8] ^ 56[29] ^ S7[z7] ^ S8[z6] ^ 55[22] 
K18 = S5[zA] ^ S6[zB] ^ S7[z5] ^ S8[z4] ^ S6[z6] 
K19 = S5[zC] ^ S6[zD] ^ S7[z3] ^ S8[z2] ^ S7[z9] 
К20 = S5[zE] ^ S6[zF] ^ S7[z1] ^ S8[z0] ^ S8[zC] 
х0хіх2х3 = z8z9zAzB ^ 55[25] ^ 56[27] ^ S7[z4] ^ S8[z6] S7[z0] 
x4x5x6x7 = 20212223 ^ 55[х0] ^ S6[x2] ^ S7[x1] ^ S8[x3] S8[z2] 
x8x9xAxB = 24252627 ^ 55[х7] ^ S6[x6] ^ S7[x5] ^ S8[x4] 55[21] 
хСхрхЕхЕ = zCzDzEzF ^ S5[xA] ^ 56[х9] ^ S7[xB] ^ S8[x8] S6[z3] 
K21 = S5[x3] ^ S6[x2] ^ S7[xC] ^ S8[xD] ^ S5[x8] 
K22 = S5[x1] ^ 56[х0] ^ S7[xE] ^ S8[xF] ^ S6[xD] 
К23 = S5[x7] ^ 56[х6] ^ S7[x8] ^ S8[x9] ^ S7[x3] 
K24 = S5[x5] ^ S6[x4] ^ S7[xA] ^ S8[xB] ^ S8[x7] 
20212223 = x0x1x2x3 ^ S5[xD] ^ S6[xF] ^ S7[xC] ^ S8[xE] S7[x8] 
z4z5z6z7 = x8x9xAxB ^ 55[20] ^ S6[z2] ^ S7[z1] ^ S8[z3] S8[xA] 
Z8z9zAzB = xCxDxExF ^ 55[27] ^ S6[z6] ^ S7[z5] ^ S8[z4] ^ S5[x9] 
zCzDzEzF = x4x5x6x7 ^ S5[zA] ^ S6[z9] ^ S7[zB] ^ S8[z8] ^ S6[xB] 
K25 = S5[z3] ^ S6[z2] ^ S7[zC] ^ S8[zD] ^ S5[z9] 
K26 = S5[z1] ^ S6[z0] ^ S7[zE] ^ S8[zF] ^ S6[zC] 
K27 = S5[z7] ^ S6[z6] ^ S7[z8] ^ S8[z9] ^ S7[z2] 
K28 = S5[z5] ^ 56[24] ^ S7[zA] ^ S8[zB] ^ S8[z6] 
х0х1х2х3 = z8z9zAzB ^ 55[25] ^ S6[z7] ^ 57[24] ^ S8[z6] ^ 57[20] 
x4x5x6x7 = 20712223 ^ 55[х0] ^ 56[х2] ^ S7[x1] ^ S8[x3] ^ S8[z2] 
x8x9xAxB = 24252627 ^ 55[х7] ^ S6[x6] ^ S7[x5] ^ S8[x4] 55[21] 
хСхрхЕхЕ = zCzDzEzF ^ S5[xA] ^ 56[х9] ^ S7[xB] ^ S8[x8] S6[z3] 
К29 - S5[x8] ^ S6[x9] ^ S7[x7] ^ S8[x6] ^ S5[x3] 
K30 = S5[xA] ^ S6[xB] ^ S7[x5] ^ S8[x4] ^ S6[x7] 
K31 = S5[xC] ^ S6[xD] ^ S7[x3] ^ S8[x2] ^ S7[x8] 
K32 = S5[xE] ^ S6[xF] ^ S7[x1] ^ 58[х0] ^ S8[xD] 

2.4.1. Masking Subkeys And Rotate Subkeys 
Let Kml, ..., Kml16 be 32-bit masking subkeys (one per round). 
Let Krl, , Krl6 be 32-bit rotate subkeys (one per round); only the 
least significant 5 bits are used in each round. 
for (i21; i<=16; i++) 1 Kmi = Ki; Kri = К16+1; ) 
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2.5. Variable Keysize 


The CAST-128 encryption algorithm has been designed to allow a key 
Size that can vary from 40 bits to 128 bits, in 8-bit increments 
(that is, the allowable key sizes are 40, 48, 56, 64, ..., 112, 120, 
and 128 bits. For variable keysize operation, the specification is 
as follows: 


1) For key sizes up to and including 80 bits (i.e., 40, 48, 56, 64, 
72, and 80 bits), the algorithm is exactly as specified but uses 
12 rounds instead of 16; 


2) For key sizes greater than 80 bits, the algorithm uses the full 16 
rounds; 


3) For key sizes less than 128 bits, the key is padded with zero 
bytes (in the rightmost, or least significant, positions) out to 
128 bits (since the CAST-128 key schedule assumes an input key of 
128 bits). 


Note that although CAST-128 can support all 12 key sizes listed 
above, 40 bits, 64 bits, 80 bits, and 128 bits are the sizes that 
find utility in typical environments. Therefore, it will likely be 
sufficient for most implementations to support some subset of only 
these four sizes. 


In order to avoid confusion when variable keysize operation is used, 
the name CAST-128 is to be considered synonymous with the name CAST5; 
this allows a keysize to be appended without ambiguity. Thus, for 
example, CAST-128 with a 40-bit key is to be referred to as CAST5-40; 
where a 128-bit key is explicitly intended, the name CAST5-128 should 
be used. 


2.6. CAST5 Object Identifiers 
For those who may be using CAST in algorithm negotiation within a 
protocol, or in any other context which may require the use of OBJECT 


IDENTIFIERs, the following OIDs have been defined. 


algorithms OBJECT IDENTIFIER ::- 
{ iso(1) memberBody(2) usa(840) nt(113533) nsn(7) algorithms(66) } 
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cast5CBC OBJECT IDENTIFIER ::- ( algorithms cast5CBC(10) } 
Parameters ::- SEQUENCE ( 
iv OCTET STRING DEFAULT 0, -- Initialization vector 
keyLength INTEGER -- Key length, in bits 


Note: The iv is optional and defaults to all-zero. On the encoding 
end, if an all-zero iv is used, then it should absent from 
the Parameters. On the decoding end, an absent iv should be 
interpreted as meaning all-zeros. 


This is encryption and decryption in CBC mode using the CAST-128 
symmetric block cipher algorithm. 


cast5MAC OBJECT IDENTIFIER ::- ( algorithms cast5MAC(11) ) 
Parameters ::- SEQUENCE { 
macLength INTEGER, -- MAC length, in bits 
keyLength INTEGER -- Key length, in bits 


} 


This is message authentication using the CAST-128 symmetric block 
cipher algorithm. 


pbeWithMD5AndCast5CBC OBJECT IDENTIFIER ::= 
( algorithms pbeWithMD5AndCAST5-CBC(12) ] 


Parameters ::- SEQUENCE { 
salt OCTET STRING, 
iterationCount INTEGER, -- Total number of hash iterations 
keyLength INTEGER -- Key length, in bits 


Note: The IV is derived from the hashing procedure and therefore 
need not be included in Parameters. 


This is password-based encryption and decryption in CBC mode 


using MD5 and the CAST-128 symmetric block cipher . See PKCS %5 
(which uses the DES cipher) for details of the PBE computation. 


Adams Informational [Page 7] 


КЕС 2144 СА5Т-128 Encryption Algorithms May 1997 


2.7. Discussion 


CAST-128 is a 12- or 16-round Feistel cipher that has a blocksize of 
64 bits and a keysize of up to 128 bits; it uses rotation to provide 
intrinsic immunity to linear and differential attacks; it uses a 
mixture of XOR, addition and subtraction (modulo 2**32) in the round 
function; and it uses three variations of the round function itself 
throughout the cipher. Finally, the 8x32 s-boxes used in the round 
function each have a minimum nonlinearity of 74 and a maximum entry 
of 2 in the difference distribution table. 


This cipher appears to have cryptographic strength in accordance with 
its keysize (128 bits) and has very good encryption / decryption 
performance: 3.3 MBytes/sec оп a 150 MHz Pentium processor. 


3. Intellectual Property Considerations 


The CAST-128 cipher described in this document is available worldwide 
on a royalty-free basis for commercial and non-commercial uses. 


4. Security Considerations 


This entire memo is about security since it describes an algorithm 
which is specifically intended for cryptographic purposes. 


5. References 


[Adams] Adams, C., "Constructing Symmetric Ciphers using the CAST 
Design Procedure", Designs, Codes, and Cryptography (to appear). 


[Web1] "Constructing Symmetric Ciphers using the CAST Design 
Procedure" (identical to [Adams] but available on-line) and "CAST 
Design Procedure Addendum", http://www.entrust.com/library.htm. 


[Web2] "CAST Encryption Algorithm Related Publications", 
http://adonis.ee.queensu.ca:8000/cast/cast.html. 
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ее15р094 
£997f1c1 
d37ac6a9 
d7503525 
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аа51с90Ғ 
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Oced63d0 
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de0436ba 
e9ffd909 
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57538ad5 
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04ее002е 
cal80dcf 
31366241 
75c6372b 
f7fbf265 
eadf55b3 
aa786bf6 
р4с332е6 
e01063da 
ellf0abc 
9ceb418f 
4744ead4 
d47c27af 
35ba3e4a 
7c63b2cf 
42e04198 
f5d2f4db 
962bdalc 
427b169c 


fe6lcf7a 
99c430ef 
dc440086 
01420ddb 
984е807Ғ 
62143154 
071Ғ6181 
2701f50c 
208cfb6a 
8a45388c 
ce280ae1 
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9c004dd3 
15c361d2 
df2f8656 
aa54166b 
4a97c1d8 
90ecf52e 
е930159Ғ 
alac2dae 
65965319 
6a390493 
£61b1891 
a2d1936b 
73e2bb14 
89fe78e6 
380782d5 
051ef495 
50afd341 
ab85c5f3 
d5bd9e98 
22513fle 
032268d4 
4736£464 
bfc5fe4a 
1cacd68d 
b11c3274 
51c85f4d 
3526ffa0 
700b45e1 
Ocd0ede7 
ab838653 
ele696ff 
5ac9f049 


eec5207a 
5£0c0794 
еҒ944459 
e4e7ef5b 
77e83f4e 
0d554b63 
39Ғ7627Ғ 
99847ар4 
8Ғ458с74 
14804366 
27е19ра5 


6003е540 
с2е7661а 
887ca41a 
22568e3a 
52764457 
22b0c054 
b48ee411 
a2d4b76d 
b949e354 
e63d37e0 
bb72275e 
2ad286af 
a0bebc3c 
3fab0950 
c7fa5cf6 
aa573b04 
а7с13275 
1b55db94 
е31231р2 
аа51а79р 
с9600асс 
5ad328d8 
a70aec10 
2ad37c96 
dd24cb9e 
56907596 
c37b4d09 
d5ea50f1 
26470db8 
6e2f1e23 
b141ab08 
dd8f0f00 


55889c94 
18dcdb7d 
ba83ccb3 
25alff41 
79929269 
54681121 
361е3084 
a0e3df79 
d9e0a227 
721d9bfd 
d5a6c252 


May 1997 


cf9fc949 
22d4ff8e 
a2d2bd2d 
a2d341d0 
b5£437a7 
bc8e5935 
Abff345d 
c19b0c50 
b04669fe 
2a54f6b3 
aa508167 
aa56d291 
54623779 
325ff6c2 
8ac31511 
4a805d8d 
915a0bf5 
aad4e324 
2ad5ad6c 
2ad344cc 
ce387e6d 
b347cc96 
ac39570a 
0175cb9d 
7elc54bd 
a5bb15e6 
bc306ed9 
85a92872 
£881814c 
83719c9e 
Тсса89р9 
5c8165bf 


72£c0651 
ald6eff3 
e0c3cdfb 
e180f806 
24fa9f7b 
c866c359 
e4eb573b 
ba6cf38c 
4ec73a34 
a58684bb 
e49754bd 
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КЕС 2144 


c5d655dd 
54£03084 
eccfOldb 
81ed6f61 
5e552d25 
a20c3005 
ее41е729 
73£98417 
50d99c08 
cdf0b680 
7af75673 
db2ffd5e 
b8da230c 
c72feffa 
61d9b8c6 
dc8637a0 
2d6a77ab 
5483697b 
b284600c 
8f£5ea2b3 
43479572 


5-Вох 53 
8defc240 
beblf9bf 
11107d9f 
553fb2c0 
4e1a8302 
a8cO1db7 
99р03арғ 
р843с213 
а747а2а0 
8c96fdad 
efbd7d9b 
23efe941 
f8af918d 
ef303cab 
8b907cee 
5c76460e 
1£97c090 
68cc7bfb 
4b39fffa 
61bd8ba0 
285ра1с8 
1Ғ081Ғар 
d2d02dfe 
3a609437 
a2d02fff 


Adams 


eb667064 
066f£472 
a6d3d0ba 
20e74364 
52724237 
8871df63 
бе1а2а7с 
а1269859 
cb3f4861 
17844d3b 
2fdd5cdb 
8£32cel9 
80823028 
22822699 
00b24869 
16a7d3b1 
3527ed4b 
2667a8cc 
d835731d 
Ес184642 
7e6dd07c 


25fab5bd9f 
eefbcaea 
07647db9 
489ae22b 
baeO07fff 
579fc264 
b5dbc64b 
6с0743Ғ1 
1651192е 
5d2c2aae 
аб72597а 
а903Ғ12е 
4e48f79e 
984faf28 
b51fd240 
00ea983b 
081bdb8a 
d90f2788 
ba39aee9 
а11е4241 
3c62f44f 
108618ae 
f8ef5896 
ec00c9a9 
d2bf60c4 


CAST-128 Encryption Algorithms 


77840р4а 
a31aa153 
b6803d5c 
b45e1378 
79d2951c 
b9de2fcb 
50045286 
ec645c44 
c26bd765 
3leef84d 
а11631с1 
306af97a 
dcdef3c8 
82c570b4 
b7ffce3f 
9£c393b7 
821fd216 
85196048 
dcb1c647 
0a036b7a 
06dfdfle 


eb903dbf 
e8cf1950 
b2e3e4d4 
d4ef9794 
528246e7 
67094£31 
638dc0e6 
8309893c 
af70bf3e 
8ee99a49 
ada840d8 
60270ағ2 
8f616ddf 
779ҒаҒ9р 
e7c07ce3 
d4d67881 
93a07ebe 
12490181 
a4ffd30b 
сеаа04ғ4 
35c0eaa5 
fcfd086d 
e4cf52da 
44715253 
d43£03c0 


alb6a801 
dadc4755 
af77a709 
de18639b 
c60d894c 
Occ6c9e9 
1e6685f3 
52c877a9 
64a3f6ab 
7e0824e4 
30f66f43 
02£03ef8 
d35fb171 
d8d94e89 
08dc283b 
a7136eeb 
095c6e2e 
8c4bacea 
ac4c56ea 
4fb089bd 
6c6cc4ef 


e810c907 
51df07ae 
3d4f285e 
125e3fbc 
8e57140e 
f2bd3f5f 
55819d99 
Ofeddd5f 
58c31380 
50da88b8 
45£54504 
0276e4b6 
e29d840e 
92ас560а 
e566b4al 
fd47572c 
b938cal5 
5de5ffd4 
faf7933b 
127ea392 
e805d231 
f9ff2889 
95155067 
0a874b49 
50b4ef6d 


84db26a9 
b5625dbf 
33b4a34c 
881ca122 
488cb402 
Obeeff53 
£33401c6 
cdff33a6 
80342676 
2ccb49eb 
ЫЗҒаес54 
99319ad5 
088al1bc8 
8b1c34bc 
43daf65a 
c6bcc63e 
db92f2fb 
833860d4 
3ebd81b3 
649da589 
7160a539 


47607fff 
920e8806 
b9afa820 
21fffcee 
3373Ғ7ЫҒ 
40fff7cl 
al97c81c 
2f7fe850 
5£98302e 
8427f4a0 
fa5d7403 
94Ға6574 
842£7d83 
224d1e20 
c3e9615e 
f76cedd9 
97b03cff 
dd7ef86a 
6d498623 
10428db7 
428929fb 
694bcc11 
494a488c 
d773bc40 
07478cd1 


Informational 


e0b56714 
68561реб 
397bc8d6 
b96726d1 
lba4fe5b 
e3214517 
30a22c95 
a02b1741 
25а75е7р 
846a3bae 
157fd7fa 
c242fa0f 
bec0c560 
301e16e6 
f7e19798 
1a513742 
5eea29cb 
0d23e0f9 
230eabb0 
a345415e 
73bfbe70 


369fe44b 
f0ad0548 
fade82e0 
825b1bfd 
8c9f8188 
1fb78dfc 
4a012d6e 
d7c07f7e 
727сс3с4 
1еас5790 
e83ec305 
92798502 
340ce5c8 
8437aa88 
3cf8209d 
bda8229c 
3dc2c0f8 
76a2e214 
193cbcfa 
8272а972 
b4fcdf82 
236a5cae 
b9b6a80c 
7с34671с 
006е1888 


21£043b7 
83ca6b94 
5ee22b95 
8049a7e8 
a4b09f6b 
b4542835 
31a70850 
7cbad9a2 
e4e6dlfc 
8ЕЕ77888 
ef8579cc 
атезерро 
61a3c9e8 
273be979 
7619b72£ 
ef6828bc 
145892f5 
6c387e8a 
6438bc87 
52038323 
83877605 


8clfc644 
e13c8d83 
a067268b 
9255c5ed 
a6fc4ee8 
8e6bd2c1 
c5884a28 
02507fbf 
0a0fb402 
796Ғр449 
4f91751a 
8276dbcb 
96bbb682 
7d29dc96 
6094d1e3 
127dadaa 
8dlab2ec 
b9a40368 
27627545 
9270c4a8 
4fb66a53 
12deca4d 
5c8f82bc 
02717ef6 
a2e53f55 


May 1997 


e5d05860 
2d6ed23b 
5£0e5304 
22р7аа70 
1ca815cf 
9Ғ63293с 
60930Е13 
2180036Ғ 
20с710е6 
ee5d60f6 
d152de58 
c68e4906 
bca8f54d 
bOffeaa6 
8f1c9ba4 
520365d6 
91584f7f 
0ae6d249 
f0b5blfa 
3e5d3bb9 
4523ecf1 


aececa90 
927010d5 
8272792e 
1257a240 
c982b5a5 
437be59b 
ccc36f71 
5afb9a04 
Of7fef82 
8252dc15 
925669c2 
02778176 
93040148 
2756d3dc 
cd9ca341 
438а074е 
64380е51 
925d958f 
825cf47a 
127de50b 
0e7dc15b 
2c3f8cc5 
89d36b45 
4feb5536 
b9e6d4bc 
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КЕС 2144 


а2048016 
94750001 
6ea22fde 
67214cb8 
5727с148 
282Ғ9350 
f7baefd5 


S-Box S4 
9db30420 
Те287аҒҒ 
28147f5f 
ее44111а 
80530100 
ce84ffdf 
2649abdf 
abe0502e 
44351805 
a5bf6d8e 
26486e3e 
69dead38 
bd59e4d2 
e756bdff 
6e85cb75 
20c763ef 
6701902c 
026a4ceb 
b7747£9d 
61c2f50f 
63315c21 
d5cad3b6 
ac07be6b 
6£7de532 
109873f6 
5ce2a465 
77079103 
d8eeb6d2 
39e4460c 
b5676e69 
8644213e 
7ae5290c 


S-Box S5 
Тес90с04 
08fbflfa 
еба2е77Ғ 
5£480a01 
1a550a04 


Adams 


97573833 
570075а2 
5f08ae2b 
b1e583d1 
2ре98а1а 
83345362 
4142еа9с 


1fb6e9de 
e60fb663 
4fa2b8cd 
Ofca5167 
e83e5efe 
£5718801 
aea0c7f5 
ec8d77de 
7£3d5ce3 
1143с44Ғ 
8ра78а70 
1574са16 
e3d156d5 
dd3369ac 
ре07с002 
c366ab5fc 
9р757а54 
52437eff 
ab2af7b4 
6552daf9 
5e0a72ec 
0caec388 
ср44а148 
58fd7eb6 
00613096 
a730f32c 
dea03af6 
e523be77 
1fda8538 
9bd3ddda 
b7dc59d0 
3cb9536b 


2c6e74b9 
ешэшвсе 
f0c720cd 
0412b2aa 
ba8f65cb 


CAST-128 Encryption Algorithms 


а7207467 
f9Db88f8 
af7a616d 
b7dc3e62 
8ab41738 
d91d1120 
а4315с11 


a7be7bef 
095Е35а1 
с9430040 
71ff904c 
ac9af4f8 
3dd64b04 
36338сс1 
57971е81 
a6c866c6 
43958302 
74717е4с1 
d£871b62 
4fe876d5 
ес17р035 
с2325577 
9c382880 
31d477£7 
2£8£76b4 
efc34d20 
d2c231f8 
49bafefd 
£73001e1 
8р900Ғ56 
а01ее900 
c32d9521 
d0aa3fe8 
78a8565e 
c2154529 
1987832f 
df7e052f 
7965291f 
851e20fe 


9b0e66df 
d2051b00 
c4494816 
259814fc 
7251Ғ4е7 


deOf8f3d 
8942019e 
e5c98767 
7£10bdce 
20elbe24 
2b6d8da0 
83323ec5 


d273a298 
79ebf120 
0cc32220 
2d195ffe 
7£e72701 
a26f263b 
503f7e93 
el4f6746 
5d5bcca9 
d0214eeb 
р506е07с 
211c40b7 
2£91a340 
06572327 
893ff4ec 
0ace3205 
91260031 
0df980a5 
2e096b7c 
25130f69 
187908d9 
6c728aff 
013988c3 
24adffc2 
adal21ff 
8a5cc091 
dee356df 
2f69efdf 
ca007367 
db25701c 
ccd6fd43 
9833557e 


a6337911 
735aba00 
ccf5c180 
41d0efe2 
95a51725 


72£87b33 
4264ab5ff 
cflfebd2 
£90a5c38 
af96da0f 
642b1e31 
dfef4636 


4a4f'7bdb 
fd059d43 
ғаа30530 
1а05645Ғ 
d2b8ee5f 
7ed48400 
d3772061 
c9335400 
daec6fea 
022083b8 
£32d0a25 
a5la9ef9 
557be8de 
99afc8b0 
5bbfc92d 
aac9548a 
36cc6fdb 
8674cde3 
1741a254 
d8167fa2 
8d0dbd86 
71eae2a1 
b1c52fca 
£4990fc5 
29908415 
d49e2ce7 
21f05cbe 
afe67afb 
a99144f8 
lb5e5lee 
41823979 
13ecf0b0 


b86a7fff 
2ab722d8 
38851640 
4e40b48d 
c106ecd7 


Informational 


abcc4f33 
856302e0 
6lefc8c2 
Off0443d 
68458425 
9c305a00 
а133с501 


64аа8с57 
64976761 
сба5374Ғ 
Ocl3fefe 
06df4261 
547eebe6 
11р638е1 
6920318Ғ 
9Ғ926Ғ91 
3fb6180c 
79098602 
00143775 
00eae4a7 
56c8c391 
d0ec3b25 
еса1а7с7 
c70b8b46 
edda04eb 
e5b6a035 
0418f2c8 
311170а7 
1f9af36e 
b4be31cd 
9711aac5 
7fbb977f 
0ce454a9 
8b75e387 
£470c4b2 
296b299e 
£65324e6 
932bcdf6 
d3ffb372 


1dd358f5 
386381cb 
15р0а848 
248eb6fb 
97a5980a 


7688c55d 
72dbd92b 
f1ac2571 
606e6dc6 
99833be5 
52bce688 
e9d3531c 


85510443 
ЕЗ641Ғ63 
1d2d00d9 
081b08ca 
bb9e9b8a 
446d4ca0 
72500e03 
08145299 
9Ғ46222Ғ 
18Ғ8931е 
e4eabb81 
041e8ac8 
Oce5c2ec 
6b65811c 
b7801ab7 
041afa32 
d9e66a48 
17a9be04 
213d42f6 
001a96a6 
3e9b640c 
cfcbd12f 
d8782806 
001d7b95 
af9eb3db 
d60acd86 
b3c50651 
f3e0eb5b 
492fc295 
6afce36c 
b657c34d 
3Ғ85с5с1 


44dd9d44 
acf6243a 
e68b18cb 
8dbalcfe 
c539b9aa 


May 1997 


7р00а650 
ее971569 
сс8239с2 
60543a49 
600d457d 
1b03588a 
ее353783 


fa020ed1 
241e4adf 
24147615 
05170121 
7293ea25 
6cf3d6f5 
f80eb2bb 
ffc304a5 
3991467d 
281658e6 
28123р23 
09114003 
4db4bba6 
5e146119 
8d6d3b24 
1d16625a 
56e55a79 
2c18f4df 
2с1с7с26 
0d1526ab 
cc3el10d7 
с14е8417 
12a3a4e2 
82e5e7d2 
29c9ed2a 
015Ғ1919 
b8a5c3ef 
d6cc9876 
9266beab 
0316cc04 
4edfd282 
Oaef7ed2 


1731167Ғ 
69befd7a 
4caadeff 
41a99b02 
4d79fe6a 
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КЕС 2144 


Е2ЕЗҒ763 
6366e52d 
df13a280 
5clff900 
ef55alff 
911e739a 
bcf3f0aa 
b868bf80 
136e05db 
26e46695 
5bb5d0e8 
a21de820 
0ab378d5 
580a249f 
66b4f0a3 
76£0ae02 
134f616f 
9fe459d2 
445f7382 
be60e2db 
324ed72f 
44094f85 
3d38f5f7 
6cf6e479 
5ce96c28 
d6cd2595 
e822fe15 


S-Box S6 
f6fa8f9d 
bf9f0960 
33f14961 
a3149619 
01665991 
fd41197e 
083919a7 
ea6f7388 
284caf89 
80226dae 
ceb2296f 
53bddb65 
8de4bf99 
5£04456d 
4ec75b95 
35162386 
3a62efld 
36£73523 
89dffÜbb 


Adams 


68af8040 
02d1c000 
74b55bd2 
fe38d399 
e59ca2c2 
17af8975 
87ac36e9 
0d26f3fd 
fef18391 
b7566419 
87d72e5a 
d18b69de 
d951fb0c 
94£74bcO0 
c0f1648a 
083be84d 
2e77118d 
45d34559 
175683f4 
a9c23101 
4067b7fd 
3£481d87 
0ca81f36 
20758184 
el76eda3 
68fflebf 
88570983 


гсасбсе1 
dfale2ed 
c01937bd 
fec94bd5 
e1992863 
9305a6b0 
9fbaeed9 
e70bc762 
aa928223 
c340a4a3 
53c0843a 
e76ffbe7 
а11101а0 
22258698 
24f2c3c0 
e6ea8926 
a787e238 
4cfb6e87 
5fe2be78 


CAST-128 Encryption Algorithms 


ed0c9e56 
c4ac8e05 
682199c0 
Oc4eff0b 
a6b62d27 
32c7911c 
е53а7426 
9342еде7 
fb887a37 
f654efc5 
арбабее1 
ЕЗЕ65777 
ded7da56 
e327888e 
697ed5af 
28421c9a 
b31b2bel 
d9f2da13 
cdc66a97 
eba5315c 
0523138e 
fcfeae7b 
52af4a8a 
dOcefaó65 
6bac307f 
7555442c 
750e6249 


4ca34867 
83£0579d 
£506c6da 
а114174а 
c8£30c60 
e86be3da 
49dbcfb0 
35f29adb 
9334be53 
df7e9c09 
fe893655 
е967Ға78 
7£d37975 
c9c4c83b 
42d15d99 
33335094 
f3a5f676 
7da4cecO 
448f4f33 


11b4958b 
9377£571 
d421e5ec 
062407ea 
e66a4263 
89Ғ89468 
015342825 
04a5c284 
d6e7f7d4 
d08d58b7 
223a66ce 
fa02c3f6 
4124bbe4 
9£7b5561 
49e92ff6 
44489406 
aa90b472 
dbc65487 
70be0288 
224e42f2 
5ca3bc78 
7T'Ib5ff76 
66d5e7c0 
88Ғ7ре58 
37682942 
f19f06be 
da627e55 


е2337Е7с 
63ed86b9 
e4625e7e 
еаа01866 
2e78ef3c 
74bed3cd 
4e670c53 
5c4cdd8d 
3b3a21bf 
a694a807 
25bfe68a 
0ba93563 
da5a26c0 
2ас15бре 
cd0d7fa0 
157ec6f2 
74364853 
6c152daa 
754613c9 


eleb5a88 
0c05372a 
53fb3ce8 
aa2f4fbl 
df65001f 
0d01e980 
1a9e7449 
63673706 
c7fb7dc9 
48925401 
c62bf3cd 
407edac3 
94ca0b56 
c3dc0280 
309e374f 
736e4cb8 
3ca5d717 
ІЗе4Ғ94е 
b3cdcf72 
1c5c1572 
ас0Ғаббе 
8c2302bf 
d£3b0874 
4a046826 
85360fa9 
£9e0659a 
5e76ffa8 


95db08e7 
lab6a6b8 
a308ea99 
a084db2d 
d0d51932 
372da53c 
5c3d9c01 
f0d48d8c 
16434be3 
5b7c5ecc 
b4628abc 
8e342bc1 
e81f994f 
4f628daa 
7b6e27ff 
372b74af 
20951063 
cb0396a8 
2b05d08d 


Informational 


8709e6b0 
578535f2 
c8adedb3 
4£b96976 
0ec50966 
524755f4 
64ee2d7e 
50f5b616 
3063fcdf 
clbacb7f 
9e0885f9 
cbb3d550 
0Е5755а1 
05687715 
2cb6356a 
c1092910 
7d161bba 
176d486f 
6e5dd2f3 
f6721b2c 
75922283 
aaf47556 
95055110 
Off6f8f3 
17e3fe2a 
eeb9491d 
b1534546 


016843b4 
de5ebe39 
4e23e33c 
09a8486f 
cfOfeclA4 
4c7£4448 
64bdb941 
b88153e2 
9aea3906 
221db3a6 
cf222ebf 
e8allbe9 
9528cd89 
57£55ec5 
a8dc8af0 
692573e4 
4576698d 
c50dfe5d 
48b9d585 


d7e07156 
2261ре02 
28а87Ғс9 
90с79505 
dfdd55bc 
03b63cc9 
cddbbida 
£24766e3 
b6f589de 
e5ff550f 
68cb3e47 
1793084d 
e0ele56e 
646c6bd7 
85808573 
8bc95fc6 
9cad9010 
097c13ea 
20936079 
lad2fff3 
784d6b17 
5£46b02a 
1b5ad7a8 
a09c7£70 
24679767 
34010718 
6d47de08 


eced5cbc 
f£38ff732 
79cbd7cc 
a888614a 
f7ca07d2 
dab5d440 
2c0e636a 
08а19866 
efe8c36e 
9a69a02f 
25ac6f48 
4980740d 
fd339fed 
e2220abe 
7345c106 
e9a9d848 
b6fad407 
fcd707ab 
dc049441 


May 1997 


4e29fea7 
d642a0c9 
34959981 
b0a8a774 
29de0655 
Occ844b2 
01c94910 
8eca36c1 
ec2941da 
56083049 
086с010Ғ 
b0d70eba 
6184b5be 
44904db3 
4991Ғ840 
7d869cf4 
af462ba2 
631da5c7 
459b80a5 
8c25404e 
58еро16е 
25092801 
f61ed5ad 
5346aba0 
£5a96b20 
bb30cab8 
efe9e7d4 


325553ac 
8989b138 
48а14367 
2900af98 
d0a82072 
6dba0ec3 
ba7dd9cd 
lae2eac8 
£890cdd9 
68818a54 
a9a99387 
c8087dfc 
b87834bf 
d2916ebf 
f41e232f 
£3160289 
592af950 
0921c42f 
c8098f9b 
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7dede786 
bf32679d 
8cf63166 
4е8Ғ0252 
3007cd3e 
08a930f6 
Ғра1ае12 
e8816f4a 
b17£5505 
653d7e6a 
b81a928a 
3b4cbf9f 
a2d762cf 


S-Box 57 
85e04019 
0227bce7 
a05fbcf6 
4d495001 
2660c200 
107789be 
4e7b3aff 
470с2829 
0а961288 
c06eba30 
ad4ebc46 
92544a8b 
0e0804e9 
da6d0c74 
0с4Ғо99а 
b9068d78 
е7225308 
f28ebfbO 
2711fd60 
28e74e41 
£22b017d 
2ес0169с 
а699296е 
66626с1с 
9883 Ғеб66 
74904698 
c79£022£f 
d3b5ab34 
1814386b 
97fd61a9 
91da55f4 
518f£36b2 


Adams 


с39а3373 
d45b5b75 
061c87be 
64d8314d 
74719eef 
957ef305 
2d4bd736 
3814f200 
59357cbe 
54268d49 
60ed5869 
4a5de3ab 
49c92f54 


332bf567 
44642916 
са4181е9 
38be4341 
7565bde4 
b3b2e9ce 
5£43671b 
4725ba37 
ela5c06e 
07211624 
468f£508b 
009b4fc3 
55flbe56 
79аас5бс 
bb325778 
а33754Ғ4 
8р75сҒ77 
£5b9c310 
438050e3 
c2610aca 
а4173Ғ70 
15488аа9 
496cff6f 
7154c24c 
2ес40581 
4c2b0edd 
3с997е7е 
£72bf9b7 
30bcc33d 
ea7759f4 
40а230ғ3 
84514370 


CAST-128 Encryption Algorithms 


42410005 
b353f£d00 
88c98f88 
da3870e3 
dc872681 
b7fbffbd 
Of25faab 
а3Ғ94043 
edbd15c8 
51a477ea 
97с55р96 
e6051d35 
38b5f331 


662dbfff 
18fac300 
е150210с 
913сее1а 
64241f7a 
0502аа8Ғ 
9cf6e037 
a66ad22b 
13749e67 
45c28829 
7829435f 
aba68ced 
e7e5363b 
3ce4elad 
3ec6d97b 
£430c87d 
llef8da4 
a0eac280 
069908a8 
3d49a9cf 
ddlel16c3 
d716e740 
1c9f4986 
еа082р2а 
763953с3 
4£757656 
Бе4Ғ9504 
1b0434c0 
З8а0с07а 
2а57539а 
d1988f35 
Ofedce83 


623091751 
cbb0e358 
6062e397 
1e665459 
073340d4 
c266e96f 
a4f3fceb 
9с7а54с2 
7f97c5ab 
5017d55b 
eaec991b 
абе1а855 
7128а454 


cfc65693 
50Ғ180582 
e24eflbd 
92а79с3Ғ 
8248аса9 
0рс0351е 
4981ас83 
тааб1Е1е 
72£c081a 
c95e317f 
£124183b 
9ac96f78 
b3alf25d 
51f0c802 
6e77a6a9 
c8a71302 
e083c858 
0809767а 
3d7fedc4 
bae3b9df 
15e0d7f9 
40055a2c 
dfe2ed07 
93eb2939 
01d6692e 
5d393378 
3ffafbbd 
4e72b567 
fd1606f2 
569a58cf 
b6e318d2 
878ddada 


Oef3c8ab6 
830Е220а 
4A7cf8e7a 
с10908Ғ0 
7e432fd9 
6fe4ac98 
e2969123 
bc704f57 
ba5ac7b5 
d7d25d88 
29935913 
d36b4cf1 
48392905 


2a8d7f6f 
2cb2cb11 
b168c381 
089766be 
c3b3ad66 
166bf52a 
334266ce 
OcSchafa 
b1d139f7 
bc8ec511 
821dba9f 
06a5b79a 
f7debb85 
98f8f35a 
cb658b5c 
b96d8c32 
вабртвбЕ 
a3d9d2b0 
826d2bef 
b65f8de6 
50016887 
93а29а22 
р8724241 
17dcb0f0 
d3a0c108 
а132234Ғ 
76£7ad0e 
5592a33d 
с363519р 
е84ебЗаа 
3ffab0bc 
£2a279c7 


Informational 


89007246 
1f8fb214 
b6c85283 
513021a5 
0c5ec241 
b173ecc0 
257£0c3d 
da41e7f9 
b6f6deaf 
44136c76 
Olfdb7f1 
f544edeb 
a65b1db8 


ab9bc912 
b232e75c 
fde4e789 
baeeadf4 
28136086 
eb12ff82 
8c9341b7 
4437£107 
£9583745 
38bc46e9 
aff60ff4 
b2856e6e 
61fe033c 
1626a49f 
d45230c7 
ebd4e7be 
5a6317a6 
79434217 
4eeb8476 
92aeaf64 
2b9f4fd5 
e32dbf9a 
19de7eae 
58d4f2ae 
ale7160e 
3d321c5d 
296693f4 
65229301 
589442390 
462e1b78 
3d40f021 
94e01be8 


28207682 
d372cf08 
3cc2acfb 
6c5b68b7 
8809286c 
bc60b42a 
9348af49 
c25ad33a 
3a479c3a 
0404a8c8 
088e8dfa 
р0е93524 
851c97bd 


de6008a1 
453695ғ2 
5c79b0d8 
1286becf 
0bd8dfa8 
e3486911 
а04а854с0 
рбе79962 
cf19df58 
c6e6fal4 
еа2с4еба 
laec3ca9 
16746233 
eed82b29 
2bd1408b 
be8b9d2d 
fa5cf7a0 
021a718d 
488dcf25 
3ac7d5e6 
625aba82 
05874569 
053е561а 
9ea294fb 
е4ғ2ағаб 
сЗЕ5е194 
3dlfce6f 
cfd2a87f 
5479Е8еб 
6580f87e 
c3c0bdae 
90716f4b 


May 1997 


a9a9fTbe 
cc3c4a13 
3fc06976 
822f8aa0 
£592d891 
953498da 
361400bc 
54Ғ4а084 
5302da25 
b8e5a121 
9ab6f6f5 
bebb8fbd 
d675cf2f 


2028dalf 
b28707de 
le8bfd43 
b6eacb19 
35641сғ2 
d34d7516 
cb3a6c88 
42d2d816 
bec3f756 
bae8584a 
16e39264 
be838688 
3c034c28 
1d382fe3 
60c03eb7 
7979Ғр06 
5dda0033 
9ac6336a 
36c9d566 
9ea80509 
62017962 
3453dcle 
15ad6f8c 
52с#564с 
693ed285 
45269301 
c61e45be 
60aeb767 
1cb8d647 
£3817914 
4958c24c 
954b8aa3 
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5-Вох 58 
e216300d 
11a9cfbO 
de9adeb1 
0515а15а 
94074251 
12a8ddec 
82£3d055 
99865d44 
bbd35049 
522fffb1 
9d17dee7 
7170c608 
264f£620f 
e6459788 
835ffcb8 
а223736Ғ 
Е1544107 
a842eedf 
b6f2cf3b 
cd7dae0a 
77853653 
132a4f94 
5715£6b7 
e87b40e4 
730edebc 
7a5b2121 
11403092 
a0e736a0 
aal2e4f2 
5938fa0f 
e97625a5 
04£19130 


Adams 


bbddfffc 
e5952f11 
0a0cc32c 
480d3168 
5c7dcdfa 
fdaa335d 
66£b9767 
608bd593 
2998df04 
d24708cc 
27eb35e6 
2d5e3354 
24b8d2bf 
c37bc75f 
6df4c1f2 
9fb4c428 
редеее14 
fdba60b4 
9£326442 
57e85b7a 
37effcb5 
43b7950e 
ef3478dd 
е98еа084 
50643113 
481875896 
00da6d77 
5564a6b9 
87451c0f 
42399ef3 
061442157 
рабе4есо 
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a7ebdabd 
ece7990a 
ре197029 
8bbbde5a 
abbe6d63 
176f43e8 
15b80b4e 
6c200e03 
980cf42a 
1с7е27са 
c9aff67b 
d4de495a 
15с1р79е 
db07ba0c 
96Ғ50195 
25d04979 
56e9af27 
£1907b75 
ср15а4сс 
d53f5af6 
c5068778 
2Ғее741с 
#267616Е 
5889е9е1 
94917е4Ғ 
29263a4d 
4a0cdd61 
10853209 
e0f6a27a 
36997007 
0e25244b 
99265164 


35648095 
9386d174 
84a00940 
669ded42 
aa402164 
71fb46d4 
1d5b47a0 
39dc5ff6 
9b6df491 
a4eb215b 
36baf5b8 
64c6d006 
46a52564 
0676a3ab 
fdOafOfc 
34c713f8 
a04aa441 
20e3030f 
р01а4504 
20cf4d8c 
e580b3e6 
223613bd 
с148сре4 
efd390fc 
503c2fba 
ba510cdf 
ad1f4603 
c7eb8£37 
3ada4819 
0e84093d 
0c768347 
1ee7230d 


7789£8b7 
2а42931с 
bb243a0f 
c7ece831 
b301d40a 
38129022 
AcfdeO6f 
5d0b00a3 
9e7edd53 
3cfld2e2 
09c467cd 
bcc0c62c 
f8d7e54e 
7£229b1e 
b0fel34c 
c4618187 
3cf7c899 
24d8c29e 
fle47d8d 
сеа4а428 
4e68b8f4 
dd06caa2 
9052815e 
dd07d35b 
646f1282 
81Ғ47с9Ғ 
605bdfbO 
2de705ca 
Acf1764f 
4aa93e61 
589e8d82 
50b2ad80 


Informational 


ебс11210 
76e38111 
b4d137cf 
3f8f95e7 
02e7d1ca 
ce949ad4 
c28ec4b8 
ae63aff2 
06918548 
19b47a38 
c18910b1 
3dd00db3 
3e378160 
31842e7b 
e2506d3d 
еа7абе98 
92ecbae6 
e139673b 
844albe5 
79d130a4 
c5c8b37e 
37df932b 
5e410fab 
db485694 
7523d24a 
ad1163ed 
9eedc3 64 
8951570Ғ 
0d771c2b 
8360d87b 
0d2059d1 
eaee 6801 


0e241600 
b12def3a 
р44е79Ғ0 
72df191b 
53571dae 
b84769ad 
57e8726e 
7e8bd632 
58cb7e07 
424f7618 
elldbf7b 
708f8f34 
7895cda5 
24259fd7 
4f9b12ea 
7cd16efc 
dd67016d 
efa63fb8 
рае7ағас 
3486ebfb 
0d809ea2 
c4248289 
b48a2465 
38d7e5b2 
е0779695 
еа7р5965 
22ebe6a8 
df09822b 
67cdb156 
1fa98b0c 
a466bble 
8db2a283 


May 1997 


052ce8b5 
37ddddfc 
049eedfd 
7580330d 
7a3182a2 
965bd862 
647a78fc 
70108с0с 
3b74ef2e 
35856039 
Обса1ағв 
77451642 
859с15а5 
f8bef472 
f215f225 
1436876c 
151682eb 
71873054 
42cbda70 
33d3cddc 
398feb7c 
acf3ebc3 
2eda7fa4 
57720101 
Е9с17а8Ғ 
1а00726е 
сее7а28а 
bd691a6c 
350d8384 
1149382c 
f8da0a82 
ea8bf59e 
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Appendix B. Test Vectors 


This appendix provides test vectors for the CAST-128 cipher described 
this document. 


.1. Single Plaintext-Key-Ciphertext Sets 
In order to ensure that the algorithm is implemented correctly, the 


following test vectors can be used for verification (values given in 
hexadecimal notation). 


128-bit key - 01 23 45 67 12 34 56 78 23 45 67 89 34 56 78 9A 
plaintext - 01 23 45 67 89 AB CD EF 
ciphertext - 23 8B 4F E5 84 7E 44 B2 
80-bit key - 01 23 45 67 12 34 56 78 23 45 
- 01 23 45 67 12 34 56 78 23 45 00 00 00 00 00 00 
plaintext - 01 23 45 67 89 AB CD EF 
ciphertext = EB 6A 71 1A 2C 02 27 1B 
40-bit Кеу - 01 23 45 67 12 
- 01 23 45 67 12 00 00 00 00 00 00 00 00 00 00 00 
plaintext - 01 23 45 67 89 AB CD EF 
ciphertext - 7A C8 16 D1 6E 9B 30 2E 


.2. Full Maintenance Test 


A maintenance test for CAST-128 has been defined to verify the 
correctness of implementations. It is defined in pseudo-code as 
follows, where a and b are 128-bit vectors, aL and aR are the 
leftmost and rightmost halves of a, bL and bR are the leftmost and 
rightmost halves of b, and encrypt(d,k) is the encryption in ECB mode 
of block d under key k. 


01 23 45 67 12 34 56 78 23 45 67 89 34 56 78 9A (hex) 
01 23 45 67 12 34 56 78 23 45 67 89 34 56 78 9A (hex) 


Initial a 
Initial b 


do 1,000,000 times 
{ 


aL = encrypt (aL,b) 
aR = encrypt (aR,b) 
bL = encrypt (bL, a) 
ЫҚ = encrypt (bR, a) 
} 
Verify a == EE А9 DO А2 49 FD ЗВ А6 B3 43 6F B8 9D 6D СА 92 (hex) 
Verify == B2 C9 5E BO OC 31 AD 71 80 AC 05 B8 E8 3D 69 6E (hex) 
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